Descripción de la oferta
Senior Security Consultant Project context Project Details Location: Madrid Work mode: Hybrid (1 day on site) Start date: ASAP Duration: 6 months Language: English (mandatory) Project Summary Within a Group Information Security team, as part of a strategic security program (2024–2026), the mission is to provide technical expertise on a “Minimum Technical Security Baseline” (MTSB) project. The role involves defining technical security baselines with product SMEs, supporting implementation and remediation of security controls, and preparing follow-up materials for governance committees. The service will be delivered under the management of an Information Security Lead in charge of MTSB. Goals and deliverables Main Responsibilities & Key Activities Define or update MTSB baselines: Select relevant CIS Benchmark controls or fine-tune new controls to address identified risks. Organize workshops with product SMEs to refine security controls (applicability to context, impact analysis for measurement/remediation). Validate selected controls within a Control Implementation Working Group together with product teams and entities. Update the MTSB framework with revised baselines. Provide follow-up inputs for steering committees. Support product teams and entities on MTSB baselines. Contribute technically with IT and security product SMEs to agree on security controls. Participate in governance bodies to converge on security control selection. Ensure close and accurate follow-up of a large security controls framework (+100 high-level controls and several thousands low-level controls). Experience Required Senior Security Consultant level. 8+ years of expertise in IT operations and security. Proven expertise in CIS Benchmarks and technical security baselines. Experience working with IT and security product environments. Expected skills Skills Skill level Governance participation and control validation Confirmed Technical security baselines definition Expert Security hardening of systems Expert Qualys expertise Expert CIS Benchmark expertise Expert IT operations and security experience Expert Overview of IT and security technologies (server, workstation, network, mobile, access control, AV/EDR/proxy, cloud, M365, patching) Confirmed
